please(1)

1please(1)                         User Manual                        please(1)
2
3
4

NAME

6       please - a tool for access elevation.
7

SYNOPSIS

9       please /bin/bash
10
11       pleaseedit /etc/fstab
12
13       pleaseedit [-r/--reason "new fs"] /etc/fstab
14
15       pleaseedit [-g/--group groupname] filename
16
17       pleaseedit [-t/--target username] filename
18
19       please [-a/--allowenv list]
20
21       please [-c/--check] /etc/please.ini
22
23       please [-d/--dir directory] command
24
25       please [-e/--env environment] command
26
27       please [-g/--group groupname] command
28
29       please [-h/--help]
30
31       please [-t/--target username] backup tar -cvf - /home/data | ...
32
33       please [-u/--user username] backup tar -cvf - /home/data | ...
34
35       please [-l/--list]
36
37       please [-l/--list] [-t/--target username]
38
39       please [-l/--list] [-u/--user username]
40
41       please [-n/--noprompt] command
42
43       please  [-r/--reason "sshd reconfigured, ticket 24365"] /etc/init.d/ssh
44       restart
45
46       please [-p/--purge]
47
48       please [-w/--warm]
49

DESCRIPTION

51       please and pleaseedit are sudo alternatives that have regex support and
52       a simple approach to ACL.
53
54       The  aim  is  to  allow  admins to delegate accurate principle of least
55       privilege access with ease.  please.ini allows for  very  specific  and
56       flexible regex defined permissions.
57
58       pleaseedit adds a layer of safety to editing files.  The file is copied
59       to /tmp, where it can be updated.  When EDITOR exits cleanly  the  file
60       is  copied alongside the target, the file will then be renamed over the
61       original, but if a exitcmd is configured it must exit cleanly first.
62
63       -a/--allowenv list
64              allow environments separated by , to be passed through
65
66       -c/--check file
67              will check the syntax of a please.ini config file.   Exits  non-
68              zero on error
69
70       -d/--dir
71              will change directory to dir prior to executing the command
72
73       -g/--group groupname
74              run or edit as groupname
75
76       -h/--help
77              print help and exit
78
79       -l/--list
80              to list rules
81
82       -n/--noprompt
83              will not prompt for authentication and exits with a status of 1
84
85       -p/--purge
86              will purge your current authentication token for the running us‐
87              er
88
89       -r/--reason [reason]
90              will add reason to the system log
91
92       -t/--target [username]
93              to execute command, or edit as target username
94
95       -u/--user [username]
96              to execute command, or edit as target username
97
98       -v/--version
99              print version and exit
100
101       -w/--warm
102              will warm an authentication token and exit
103

EXAMPLE USAGE

105       please -t httpd /bin/bash
106              run a shell as the httpd user
107
108       please -l
109              to list what you may run
110
111       please -t "username" -l
112              to show what username may run.  username must match  the  target
113              regex in a type=list rule
114
115       please -r 'reloading apache2, change #123' systemctl reload apache2
116              to reload apache2 with a reason
117
118       pleaseedit -r 'adding new storage, ticket #24365' /etc/fstab
119              to use pleaseedit to modify fstab
120
121       Please see please.ini for configuration examples.
122

FILES

124       /etc/please.ini
125

CONTRIBUTIONS

127       I  welcome  pull  requests with open arms.  New features always consid‐
128       ered.
129

BUGS

131       Found a bug?  Please either open a ticket or send a pull request/patch.
132

AUTHORS

137       Ed Neville (ed-please@s5h.net).
138
139
140
141please 0.5.3                     10 June 2022                        please(1)